7.1
Élevée
CVE-2024-54171 IBM EntireX 11.1 is vulnerable to an XML external entity injection (XXE) attack when processing XML data
Description
IBM EntireX 11.1 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. An authenticated attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EntireX | 11.1 | Pas de correctif indiqué |
Autres CVE de EntireX
Les 13 CVE de EntireX →
CVE-2024-54170
IBM EntireX 11.1 could allow a local user to cause a denial of service due to use of a regular expression with an…
5.5
Moyenne
CVE-2024-54169
IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system
6.5
Moyenne
CVE-2025-0759
IBM EntireX 11.1 could allow a local user to unintentionally modify data timestamp integrity due to improper shared…
3.3
Faible
CVE-2024-56810
IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is…
3.3
Faible